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DETAILED ACTION 

1 . A response was received on 16 May 2006. By this response, Claims 1 , 3, 
9, 18, and 19 have been amended. No claims have been added or canceled. 
Claims 1-19 are currently pending in the present application. 

Response to Arguments 

2. Applicant's arguments filed 16 May 2006 have been fully considered but 
they are not persuasive. 

Claims 1-12 and 14-19 were rejected under 35 U.S.C. 103(a) as 
unpatentable over Linsker et al, US Patent 5598473, in view of Mazzagatte et al, 
US Patent 6862583, and Menezes et al, Handbook of Applied Cryptography. 
Claim 13 was rejected under 35 U.S.C. 103(a) as unpatentable over Linsker in 
view of Mazzagatte and Menezes, and further in view of Clark, US Patent 
5448045. 

In response to applicant's arguments against the references individually, 
one cannot show nonobviousness by attacking references individually where the 
rejections are based on combinations of references. See In re Keller, 642 
F.2d 413, 208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 
USPQ 375 (Fed. Cir. 1986). 

Specifically, in reference to each of independent Claims 1, 9, 18, and 19, 
Applicant argues that in Mazzagatte, encryption and decryption operations are 
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both performed at a print node. However, the Examiner notes that Mazzagatte 
further discloses that encryption operations can also be performed at the sending 
node (see Mazzagatte, column 7, line 57 -column 8, line 7, where SSL orTLS 
may be used to encrypt data before transmission; see also column 8, lines 46- 
52), and therefore any arguments relying on the assertion that encryption and 
decryption are only performed at the printing node are rebutted. 

Further in reference to the independent Claims, Applicant also argues that 
Menezes does not teach or suggest using a token of an intended recipient to 
encrypt information that is transmitted by a sender to the recipient. However, the 
Examiner respectfully disagrees, noting that Menezes does, in fact, disclose that 
a token, namely the public key, of an intended recipient is used to encrypt 
information transmitted to the recipient (see Menezes, page 404, paragraph 
"Identification based on PK decryption and witness", where message (1 ) includes 
the challenge e defined as the public key encryption P A using the public key of A, 
where A is the recipient of the message). 

Further, Applicant's assertions with regard to independent Claim 1 that 
Mazzagatte fails to teach or show "receiving and securely retaining a digital 
document and a transmitted independently verifiable data record of the intended 
recipient at a printout station" (see page 9 of the present response) and with 
regard to independent Claim 9 that Mazzagatte fails to teach or show "receiving 
and securely retaining a transmitted document, the encoded identification data, 
and a transmitted independently verifiable data record of the intended recipient at 
a printout station" (see page 1 0 of the present response) as claimed are not 
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persuasive because the assertions amount to a mere allegation of patentability 
without clearly pointing out how the language of the claims specifically patentably 
distinguishes them from the references. See 37 CFR 1 .1 1 1 (b) and (c). The 
Examiner believes that the cited portions of Mazzagatte do, in fact, disclose the 
above noted limitations (noting, for example, Mazzagatte, column 8, line 66- 
column 9, line 1, and column 9, lines 8-10 and 14-15, where the document is 
securely stored). 

Therefore, for the reasons detailed above, the Examiner maintains the 
rejections as set forth below. 

Claim Objections 

3. The objections to Claims 1 and 9 for informalities are withdrawn in light of 
the amendments to the claims. 

Claim Rejections - 35 USC § 112 

4. The rejection of Claim 3 under 35 U.S.C. 1 1 2, second paragraph, as 
indefinite is withdrawn in light of the amendments to the claim. 
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Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

6. Claims 1-12 and 14-19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Linsker et al, US Patent 5598473, in view of Mazzagatte et al, 
US Patent 6862583, and Menezes et al, Handbook of Applied Cryptography. 

In reference to Claims 1 , 5, and 8, Linsker discloses a method for 
determining the authenticity of a fax document (column 2, lines 23-27) that 
includes receiving a document and a digest of the document created by a hash 
algorithm and encrypted with a first token of the sender, which is the sender's 
private key (column 4, lines 54-60, where digest signature DS is the encrypted 
digest); obtaining a second token of the sender, which is the sender's public key, 
relating to the private key (column 4, lines 57-65); decrypting the digest with the 
public key (column 5, lines 20-23); creating a second digest using a hash 
algorithm (column 5, lines 23-27, and column 4, lines 25-35); and comparing the 
decrypted received digest with the second created digest (column 5, lines 23-42). 
However, although Linsker discloses authenticating the sender of a document, 
Linsker does not explicitly disclose verifying the identity of the intended recipient 
of a document. 
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Mazzagatte discloses a method for authenticated secure printing, which 
can be implemented for fax documents (column 4, lines 35-37), and which 
includes receiving and securely retaining a digital document and a transmitted 
independently verifiable data record of an intended recipient at a printout station 
(column 8, line 20-column 9, line 7; noting column 8, line 63-column 9, line 1, 
where the data is securely stored at the printer; further noting column 8, lines 20- 
29, where the digital certificate is the independently verifiable data record); 
obtaining a first token of the intended recipient, which is the recipient's private 
key (column 4, lines 9-12); requesting proof of the intended recipient's identity at 
the printout station using the independently verifiable data record (column 9, lines 
49-51 ); and releasing the document when the intended recipient's identity has 
been proven by use of a second token of the intended recipient that is related to 
the recipient's first token, where the second token is the recipient's public key 
(column 9, lines 46-62). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the method 
of Linsker by including verification of the intended recipient in addition to 
authentication of the sender, in order to ensure that printout of sensitive 
documents is authorized and that print data is securely stored (see Mazzagatte, 
column 2, lines 7-10). 

Although Mazzagatte and Linsker disclose that the independently 
verifiable data record includes identification data (Mazzagatte, column 8, lines 
20-30) and that a challenge/response protocol is used to authenticate and prove 
the intended recipient's identity (Mazzagatte, column 9, lines 58-61), Mazzagatte 
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and Linsker do not explicitly disclose that the challenge/response protocol 
decrypts encrypted identification data with the recipient's private key, where the 
identification data was encrypted with the recipient's public key. However, 
Menezes discloses that challenge-response identification and authentication can 
be performed based on public-key decryption (page 403, Section 10.3.3, first 
paragraph). Menezes further discloses that the protocol includes encrypting a 
challenge, which can be an identifier, with a public key, decrypting the encrypted 
challenge with a private key to form the response, comparing the challenge and 
response, and verifying the identity if the comparison result indicates a match 
(page 404, "(i) Challenge-response based on public-key decryption"). Therefore, 
it would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the method of Linsker and Mazzagatte by 
implementing the challenge/response protocol in the manner suggested by 
Menezes, in order to identify the recipient based on its private key (page 403, 
Section 10.3.3, first paragraph) and avoid chosen text attacks (page 404, 
paragraph "Identification based on PK decryption and witness"). 

In reference to Claims 2 and 3, Linsker, Mazzagatte, and Menezes further 
disclose receiving a digital certificate of the sender and that the public key is part 
of the certificate (see Linsker, column 5, lines 2-13). 

In reference to Claim 4, Linsker, Mazzagatte, and Menezes further 
disclose checking the validity of the certificate online (see Linsker, column 5, 
lines 6-1 3). 
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In reference to Claims 6 and 7, Linsker, Mazzagatte, and Menezes further 
disclose printing the document with a verifying mark once it has been 
authenticated (see Linsker, column 6, lines 3-29). 

In reference to Claims 9, 10, and 17, Linsker discloses a method of 
sending a fax document (column 2, lines 23-27) that includes creating a digest of 
the document using a hash algorithm (column 4, lines 25-35); encrypting the 
digest with a first token of the sender, which is the sender's private key (column 
4, lines 40-47); obtaining a second token of the sender, specifically the sender's 
public key, that will be used to decrypt the encrypted digest; and sending the 
encrypted digest, the document, and the public key to the recipient (column 4, 
lines 50-53). However, although Linsker discloses authenticating the sender of a 
document, Linsker does not explicitly disclose verifying the identity of the 
intended recipient of a document. 

Mazzagatte discloses a method for authenticated secure printing, which 
can be implemented for fax documents (column 4, lines 35-37), and which 
includes receiving and securely retaining a digital document and a transmitted 
independently verifiable data record of an intended recipient at a printout station 
(column 8, line 20-column 9, line 7; noting column 8, line 63-column 9, linel, 
where the data is securely stored at the printer; further noting column 8, lines 20- 
29, where the digital certificate is the independently verifiable data record); 
obtaining a first token of the intended recipient, which is the recipient's private 
key (column 4, lines 9-12); requesting proof of the intended recipient's identity at 
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the printout station using the independently verifiable data record (column 9, lines 
49-51 ); and releasing the document when the intended recipient's identity has 
been proven by use of a second token of the intended recipient that is related to 
the recipient's first token, where the second token is the recipient's public key 
(column 9, lines 46-62). Therefore, it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the method 
of Linsker by including verification of the intended recipient in addition to 
authentication of the sender, in order to ensure that printout of sensitive 
documents is authorized and that print data is securely stored (see Mazzagatte, 
column 2, lines 7-10). 

Although Mazzagatte and Linsker disclose that the independently 
verifiable data record includes identification data (Mazzagatte, column 8, lines 
20-30) and that a challenge/response protocol is used to authenticate and prove 
the intended recipient's identity (Mazzagatte, column 9, lines 58-61), Mazzagatte 
and Linsker do not explicitly disclose encrypting identification information of the 
recipient with the recipient's public key, nor do Mazzagatte and Linsker explicitly 
disclose that the challenge/response protocol decrypts the encrypted 
identification data with the recipient's private key. However, Menezes discloses 
that challenge-response identification and authentication can be performed 
based on public-key decryption (page 403, Section 10.3.3, first paragraph). 
Menezes further discloses that the protocol includes encrypting a challenge, 
which can be an identifier, with a public key, decrypting the encrypted challenge 
with a private key to form the response, comparing the challenge and response, 
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and verifying the identity if the comparison result indicates a match (page 404, 
"(i) Challenge-response based on public-key decryption"). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the method of Linsker and Mazzagatte by implementing the 
challenge/response protocol in the manner suggested by Menezes, in order to 
identify the recipient based on its private key (page 403, Section 10.3.3, first 
paragraph) and avoid chosen text attacks (page 404, paragraph "Identification 
based on PK decryption and witness"). 

In reference to Claims 11 and 12, Linsker, Mazzagatte, and Menezes 
further disclose proving the sender's identity by transferring data from a personal 
portable data carrier holding the private key to the transmission station from 
which the document will be sent, and that the sender enters a verifiable security 
identifier to establish the sender's identity (see Linsker, column 7, lines 13-21). 

In reference to Claims 14-16, Linsker, Mazzagatte, and Menezes further 
disclose obtaining details of the sender, including the public key, from a central 
database, and providing the details and public key in a digital certificate (see 
Linsker, column 4, lines 50-53; column 5, lines 2-13). 

Claims 18 and 19 are apparatus claims corresponding substantially to the 
methods of Claims 1 and 9, and are rejected by a similar rationale. 
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7. Claim 1 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Linsker in view of Mazzagatte and Menezes as applied to claim 1 1 above, and 
further in view of Clark, US Patent 5448045. 

Linsker, Mazzagatte, and Menezes disclose everything as applied above 
in reference to Claim 1 1 . However, Linsker, Mazzagatte, and Menezes do not 
explicitly disclose that the digest is encrypted within the personal portable data 
carrier. Clark discloses that digital signatures (formed by encrypting a message 
digest with a private key) can be performed in smart cards (column 8, lines 53- 
58). Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to modify the method of Linsker, Mazzagatte, 
and Menezes to include encrypting the digest within the personal portable data 
carrier, in order to prevent compromise of the sender's private key (see Clark, 
column 8, lines 57-62). 

Conclusion 

8. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. The Examiner again notes that Davis et al, US Patent 5633932, 
previously cited in the Office action mailed 31 August 2005, discloses a 
method that includes authenticating the intended recipient of a document 
at a printing node, in which the documents and other information are 
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encrypted by the sending node, and in which the authentication can be 
performed by certificate, smart card, biometric, or other methods. 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is 
filed within TWO MONTHS of the mailing date of this final action and the advisory 
action is not mailed until after the end of the THREE-MONTH shortened statutory 
period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will 
the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Zachary A. Davis whose telephone number is 
(571 ) 272-3870. The examiner can normally be reached on weekdays 8:30-6:00, 
alternate Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Emmanuel Moise can be reached on (571) 272-3865. 
The fax phone number for the organization where this application or proceeding 
is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 
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